Use of legacy software and devices plague healthcare. OCR's recent newsletter focuses on why legacy systems are still used in healthcare organizations and provides guidance on ways to manage the risks of these systems.

More info at HelpMeWithHIPAA.com/331

The HITECH Act added that state attorney generals can take on cases on behalf of their constituents under HIPAA. We haven't seen that many cases from the states thus far, but that may be changing. Today we discuss a recent New Jersey case regarding fraud, deceit, misrepresentation and professional misconduct. This is an eye opening state level case that everyone should pay attention to.

More info at HelpMeWithHIPAA.com/330

Insider threats are dangerous for any organization, not just healthcare. As a result, healthcare organizations need to be extra vigilant when it comes to protecting patient data. Today, we talk with Ray Ribble, CEO of SPHER, to hear some stories about why it's important to review EHR logs and how his company can help you identify potential insider threats.

More info at HelpMeWithHIPAA.com/329

It's time for our annual Halloween episode! This year we will tell you a scary, true story of how our two companies were actively targeted and attacked by a cybercriminal. Hear what happened and how our teams reacted to the cyber attack.

More info at HelpMeWithHIPAA.com/328

In today's episode, we talk with Josh Corman, Chief Strategist Cybersecurity and Infrastructure Security Agency (CISA) at the Department of Homeland Security. We will learn about CISA and what information and freely available services they provide to help healthcare businesses and other organizations within the nation's 16 critical infrastructure sectors from cyber attacks.

More info at HelpMeWithHIPAA.com/327

Email is a great tool for communication. It is quick, simple, and it has the potential to reach so many people in so little time. But, it can also be an easy way for hackers to get their hands on your personal information if you're not being careful. Phishing scams are one of the most popular ways that hackers use email as a tool to steal your information and cause data breaches. Email is evil!

More info at HelpMeWithHIPAA.com/326

IT and cybersecurity services are not the same. If you are in the market to purchase managed services or security services from an IT firm, you'll want to listen to this podcast to understand how they are different, why they are different and why you need to understand those differences to better protect your organization from cyber attacks.

More info at HelpMeWithHIPAA.com/325

In a world where people are more dependent on technology but lack the expertise to manage their own networks and systems effectively and efficiently, they turn to Managed Service Providers (MSPs). CISA has released a guide, Risk Considerations For Managed Service Provider Customers, that outlines risk considerations organizations need to consider when they partner with a MSP. We will cover this in today's episode and we are making a big announcement that you'll want to hear.

More info at HelpMeWithHIPAA.com/324

There are many challenges that come with preparing for and responding to a ransomware attack. Ransomware gangs are constantly changing their tactics in order to get to your organization's data. Therefore, as the ransomware landscape continues to evolve, so too must the preparations and responses of businesses.

More info at HelpMeWithHIPAA.com/323

You know how we love to pass along guides and resources that can help you improve your organization's privacy and security programs. Today, we are going to review a recent resource guide put out by HHS' ASPR TRACIE office called Healthcare System Cybersecurity - Readiness and Response Considerations. This guide is packed with very helpful tips, best practices, and resources surrounding cybersecurity and responding to cyber incidents. And it's FREE!

More info at HelpMeWithHIPAA.com/322